Web forensic with Lookyloo
2025-10-21 , Hollenfels

We often talk of doing forensic on a filesystem, or in memory, but what about investigating how a browser interacts with a website? Lookyloo is a web interface that helps you to do exactly that. It also comes with a whole bunch of connectors to 3rd party services and makes it very easy to pivot on indicators to find phishing campaigns.


This workshop will start by explaining how modern websites are often implemented. We will then give an introduction of the tool and a demonstration of the modules. And continue with an introduction to the API and how to integrate it with your own tools.

Formerly member of CIRCL, I moved to France but didn't go that far in spirit as I'm still part of the developers and maintainers for a whole bunch of tools there. Some say it is too many, we disagree.